EUVD-2026-93266

Subscriber Arbitrary File Upload in Taskbot = 6.6 versions...

CVE-2026-39757

The Taskbot plugin for WordPress (versions

CVE-2026-39757 WordPress Taskbot plugin <= 6.6 - Arbitrary File Upload vulnerability

Subscriber Arbitrary File Upload in Taskbot = 6.6 versions...

CVE-2026-39757 WordPress Taskbot plugin <= 6.6 - Arbitrary File Upload vulnerability

Subscriber Arbitrary File Upload in Taskbot = 6.6 versions...

EUVD-2026-93264

Subscriber Arbitrary File Upload in WP Duplicate = 1.1.11 versions...

CVE-2026-39755 WordPress WP Duplicate plugin <= 1.1.11 - Arbitrary File Upload vulnerability

Subscriber Arbitrary File Upload in WP Duplicate = 1.1.11 versions...

CVE-2026-39755 WordPress WP Duplicate plugin <= 1.1.11 - Arbitrary File Upload vulnerability

Subscriber Arbitrary File Upload in WP Duplicate = 1.1.11 versions...

CVE-2026-39755

The WordPress WP Duplicate plugin (versions

EUVD-2026-93240

Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress = 2.4.9 versions...

CVE-2026-32579 WordPress Kognetiks Chatbot for WordPress plugin <= 2.4.9 - Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress = 2.4.9 versions...

CVE-2026-32579 WordPress Kognetiks Chatbot for WordPress plugin <= 2.4.9 - Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress = 2.4.9 versions...

CVE-2026-32579

The Kognetiks Chatbot for WordPress plugin (versions

CVE-2026-25057

CVE-2026-25057 MarkUs is a web application for grading student assignments. Summary MarkUs assignment configuration ZIP uploads are vulnerable to path traversal Zip Slip, allowing arbitrary file write and enabling remote code execution. Details Archive entry names are used to construct filesystem...

CVE-2026-55579

CVE-2026-55579 — Pheditor: жестко закодированный пароль по умолчанию с RCE -critical TL;DR: Pheditor все версии поставляется с жестко закодированным паролем администратора по умолчанию admin, встроенным в исходный код. Принудительная смена пароля при первом входе отсутствует — только визуальное...

CVE-2021-31630

OpenPLC WebServer v3 - RCE authentifié CVE-2021-31630 Cet exploit est basé sur l'exploit de Exploit-DB créé par Fellipe Oliveira. Tout d'abord, s'authentifier Télécharger un fichier C malveillant Le compiler Démarrer le PLC lancer le reverse shell Arrêter le PLC inutile de le faire tourner, le...

CVE-2026-94278 File Media Renamer <= 1.3 - Author+ Arbitrary File Rename via save-attachment-compat

The File Media Renamer WordPress plugin through 1.3 does not verify that the requesting user is authorised to modify a given media attachment, allowing any user with file-upload privileges to rename attachments belonging to other users, including administrators, and to corrupt unrelated stored si...

CVE-2026-94278

The File Media Renamer WordPress plugin (versions

CVE-2025-32583

🚨 CVE-2025-32583 — Exploit RCE pour WordPress PDF 2 Post Vulnérabilité CRITIQUE ID CVE : CVE-2025-32583 Sévérité : 9.9 CRITIQUE Vecteur CVSS : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 📖 Description Une vulnérabilité dans le plugin WordPress PDF 2 Post développé par termel permet une inclusion...

CVE-2025-13407

CVE-2025-13407 GravityForms 2.9.23.1 - Téléchargement arbitraire de fichier non authentifié ADRESSE DU GROUPE TELEGRAM: https://t.me/toolsandpoc...

CVE-2020-13671

CVE-2020-13671 RCE через загрузку файлов — ядро Drupal Программное обеспечение: Drupal Core 8.7.5 Затронуты: 7.x 7.78, 8.x 8.8.11, 8.9.x 8.9.9, 9.0.x 9.0.8 CVSS: 8.8 High CWE: CWE-434 — Неограниченная загрузка файла опасного типа CISA KEV: Да — известная эксплуатируемая уязвимость Advisory:...